Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
File: ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json)
Hash identifier: zV1JzLIYpylLMs64wWVpXQd40kDjtltv+xQymM20yqA=
Subject key identifier: 0F:7B:11:79:2E:C2:71:B7:45:D3:C8:A0:F0:C6:8B:44:71:1A:48:61
Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
Certificate issuer: /CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Certificate serial: 01988FC6F27AB8F3931FD6FD4E8D8B8CA001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 17:00:36 +0000
Manifest this update: Sat 09 Aug 2025 17:00:36 +0000
Manifest next update: Sun 10 Aug 2025 17:00:36 +0000
Files and hashes: 1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: HHMb4qF8HIND13hd7jiNH2CpEQm7ZmoXNpl+/7lOXBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c6:f2:7a:b8:f3:93:1f:d6:fd:4e:8d:8b:8c:a0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Validity
Not Before: Aug 9 17:00:36 2025 GMT
Not After : Aug 10 17:00:36 2025 GMT
Subject: CN=0f7b11792ec271b745d3c8a0f0c68b44711a4861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:14:07:7b:c7:cd:1f:9e:0f:75:5f:03:53:
05:d2:a6:0c:f3:37:38:79:21:64:d1:d4:b8:42:d6:
d3:7e:e8:bd:77:77:16:0b:6d:9e:2a:e8:5e:6b:ca:
d5:ac:5c:87:46:47:3f:91:4c:eb:2a:7e:fa:2f:52:
cd:8d:06:16:f4:8f:42:ba:30:5a:f1:02:6a:a7:5c:
f2:a7:9b:2f:b0:94:91:73:82:f7:bf:7d:de:42:6c:
61:ea:c8:86:5b:db:46:8f:7a:48:97:82:fa:4b:dc:
3e:d7:2a:c5:99:82:88:86:f5:00:03:eb:8e:a8:5a:
17:45:9a:ea:31:16:20:b5:61:e1:cc:82:72:58:0b:
38:eb:cc:4d:f6:c8:c0:d2:65:b4:d4:43:12:f7:da:
dd:c1:83:b7:cf:87:75:0b:f4:7a:64:58:b6:64:a7:
ea:07:d8:ef:3a:1b:8f:0e:bd:9e:0b:3e:01:29:8a:
fc:ad:da:60:e3:c5:94:2a:e2:2a:b0:59:b7:97:2a:
c3:99:03:e6:c0:a5:c6:56:b1:17:2c:33:86:d4:51:
a4:ad:71:32:58:86:a0:ba:f6:77:72:b1:62:47:34:
c3:e8:d7:73:67:e4:e8:5d:88:6a:f7:1e:ca:67:46:
6a:86:6a:9f:c3:e1:27:b1:54:4d:a4:54:08:2e:ec:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7B:11:79:2E:C2:71:B7:45:D3:C8:A0:F0:C6:8B:44:71:1A:48:61
X509v3 Authority Key Identifier:
keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fc:4b:03:17:aa:fe:7d:21:ff:2c:1e:1f:a6:55:7e:bb:fe:
29:ce:0f:53:34:4a:b2:3d:70:4a:a0:98:51:b0:42:36:0c:f0:
e8:d0:d0:35:c3:98:47:0e:07:77:1b:63:48:21:3c:e6:58:3c:
d7:6a:fc:8e:76:95:ac:da:c6:91:3e:40:ee:1d:9a:5d:a2:9d:
1e:ad:6a:80:c2:fa:1a:35:ed:31:0c:77:2e:ea:73:7e:4f:38:
b1:a9:23:e1:f6:87:e9:d5:6c:78:c0:ff:ea:14:eb:17:45:e8:
c4:1d:81:6f:5d:ee:da:78:c3:a6:dd:fc:46:91:04:4c:83:44:
70:4e:37:cd:f1:3b:40:6d:c0:83:f7:ca:48:cc:08:f0:9a:81:
e1:04:59:e2:7c:d9:26:04:a8:54:6c:72:8a:14:f9:aa:03:cc:
a1:ac:2e:44:2f:f9:36:af:75:a5:cb:9a:c2:cf:05:3a:7a:42:
8f:70:e6:02:fc:ad:ae:04:03:d9:bf:7b:f3:e3:1b:88:5b:b8:
7f:cf:f8:df:b7:c2:98:7f:20:3e:1c:45:df:1b:9a:56:58:82:
ce:ef:99:55:73:50:c1:c7:98:69:25:f7:bd:9f:6a:59:e5:d4:
4a:87:c9:0b:de:49:c0:4c:d4:92:ef:dc:5a:71:51:0c:b6:89:
c2:3d:04:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:46 2025 by rpki-client